This is an old revision of the document!

SSH

SSH and SCP on Windows with smartcard authentication

Get pageant from putty-cac
Import a smartcart certificate
- Run pageant.exe
- Right click pageant try icon
- Add CAPI cert
- Choose certificate
Automatically import a smartcard certificate: pageant.exe CAP:User\MY\{fingerprint}
PuTTY using smartcard authentication
- Ensure that pageant.exe is still running in the system tray
- Run Putty
- Connection | SSH | Auth | [x] Attempt authencation using Pageant
- Optionally disable “Attempt keyboard-interactive auth (SSH-2)” to prevent a password login and force the smartcard use
- Optionally enable “Allow agent forwarding” to enable further logins via smartcard authentication
PLink using smartcard authentication
- Ensure that pageant.exe is still running in the system tray
- plink.exe -agent user@host
- Optioanlly use “-A” for agent forwarding
WinSCP using smartcard authentication:
- Ensure that pageant.exe is still running in the system tray
- Advanced settings | SSH | Authentication | [x] Try authentation using Pageant
- Optionally disable “Attempt keyboard-interactive Authentication” to prevent a password login and force the smartcard use